CRITICAL CISA KEV

CVE-2021-35211

CVSS v3

10

CRITICAL

EPSS Score

94.3%

exploit probability

CISA KEV

Yes

known exploited

Exploitation

SSVC status

Description

Microsoft discovered a remote code execution (RCE) vulnerability in the SolarWinds Serv-U product utilizing a Remote Memory Escape Vulnerability. If exploited, a threat actor may be able to gain privileged access to the machine hosting Serv-U Only. SolarWinds Serv-U Managed File Transfer and Serv-U Secure FTP for Windows before 15.2.3 HF2 are affected by this vulnerability.

CISA Known Exploited Vulnerability

Date Added
11/3/2021
Patch Due Date
11/17/2021
Ransomware Use
Known

Technical details

Published
7/14/2021

Frequently asked questions

What is CVE-2021-35211?

Microsoft discovered a remote code execution (RCE) vulnerability in the SolarWinds Serv-U product utilizing a Remote Memory Escape Vulnerability. If exploited, a threat actor may be able to gain privileged access to the machine hosting Serv-U Only. SolarWinds Serv-U Managed File Transfer and Serv-U Secure FTP for Windows before 15.2.3 HF2 are affected by this vulnerability.

Is CVE-2021-35211 actively exploited?

Yes. CVE-2021-35211 is on the CISA Known Exploited Vulnerabilities (KEV) catalog, meaning it has been confirmed as actively exploited in the wild. CISA requires federal agencies to patch by 11/17/2021.

What is the CVSS score for CVE-2021-35211?

CVE-2021-35211 has a CVSS v3 base score of 10 (CRITICAL severity).

Is CVE-2021-35211 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.